Port 161 SNMP

Use SNMP (application layer protocol) to obtain a list of user accounts and devices on system

Reference

HTB Pandora retired machine (to check again)

SNMP Enumeration using snmp-check

first scan the target to check open port

sudo nmap -sU -sV -p 161 192.168.18.110

Now Enumerate it

snmp-check 192.168.18.110

Windows SNMP Scanner

SoftPerfect Network Scanner : fast, flexible, advanced

SNMP Walk

snmpwalk -v1 -c public 192.168.18.110

-v1 is the version

-c is the string

For snmp version 2,use the following command

snmpwalk -v2c -c public 192.168.18.110

SNMP Enumeration using NMAP

sudo nmap -sU -P 161 --script snmp-sysdesc 192.168.18.110
sudo nmap -sU -P 161 --script snmp-processes 192.168.18.110

sudo nmap -sU -P 161 --script snmp-win32-software 192.168.18.110// List processes running on windows servers

sudo nmap -sU -P 161 --script snmp-interfaces 192.168.18.110